← Vulnerability feed

Vulnerability record · CVE-2014-9192 · published 11 December 2014

CVE-2014-9192: Trihedral vtscada integer overflow vulnerability

Trihedral · Vtscada

Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.

7.8 CVSS 2.0 High EPSS 2.9% · top 13.4% CWE-190 · Integer overflowCWE-189 · CWE-189
7.8CVSS 2.0 base score
2.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/71591 Third Party AdvisoryVDB Entry
http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm
https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02
http://www.securityfocus.com/bid/71591 Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov//advisories/ICSA-14-343-02 Third Party AdvisoryUS Government Resource

Track CVE-2014-9192 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2016-4523Trihedral VTScada WAP interface out-of-bounds read causes DoSThe WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 performs an out-of-bounds read on unspecified input, crashing t…KEVEPSS 31%analysed9.1CVE-2016-4532Trihedral vtscada path traversal vulnerabilityDirectory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to…EPSS 28%9.1CVE-2016-4510Trihedral vtscada improper authentication vulnerabilityThe WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbit…EPSS 20%7.8CVE-2017-14029Trihedral vtscada uncontrolled search path element vulnerabilityAn Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious…EPSS 0.93%7.8CVE-2017-14031Trihedral vtscada improper access control vulnerabilityAn Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and wr…EPSS 0.29%7.5CVE-2022-3181Trihedral vtscada improper input validation vulnerabilityAn Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malformed HTTP request could cause t…EPSS 0.71%7.5CVE-2017-6043Trihedral vtscada uncontrolled resource consumption vulnerabilityA Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit …EPSS 1.7%7.5CVE-2017-6045Trihedral vtscada information exposure vulnerabilityAn Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2014-9192), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.